Node Classification Backdoor Defense on Flickr (GU)
0ASR (%)GCN
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| GCNAttack=SBA2025.02 | 0 | 45.75 | — | |
| RobustGCNAttack=SBA2025.02 | 0 | 41.34 | 96.3 | |
| PruneAttack=SBA2025.02 | 0 | 42.57 | 90.96 | |
| ODAttack=SBA2025.02 | 0 | 42.77 | 95.2 | |
| RIGBDAttack=SBA2025.02 | 0 | 3.5 | 0 | |
| RIGBD-PerfectAttack=SBA2025.02 | 0 | 45.38 | 70.14 | |
| SimGuardAttack=SBA2025.02 | 0 | 45.74 | 99.59 | |
| GNNGuardAttack=GTA2025.02 | 0 | 50.35 | 94.27 | |
| PruneAttack=GTA2025.02 | 0 | 42.46 | 90.64 | |
| ODAttack=GTA2025.02 | 0 | 41.01 | 90.24 | |
| RIGBDAttack=GTA2025.02 | 0 | 3.5 | 0 | |
| RIGBD-PerfectAttack=GTA2025.02 | 0 | 45.07 | 78.33 | |
| SimGuardAttack=GTA2025.02 | 0 | 45.8 | 99.83 | |
| ODAttack=UGBA2025.02 | 0 | 42.9 | 85.78 | |
| RIGBDAttack=UGBA2025.02 | 0 | 44.99 | 11.55 | |
| RIGBD-PerfectAttack=UGBA2025.02 | 0 | 43.97 | 77.43 | |
| SimGuardAttack=UGBA2025.02 | 0 | 45.64 | 99.84 | |
| RIGBD-PerfectAttack=DPGBA2025.02 | 0.08 | 43.82 | 9.34 | |
| RIGBDAttack=DPGBA2025.02 | 3.08 | 6.9 | 18.35 | |
| GNNGuardAttack=DPGBA2025.02 | 71.89 | 49.72 | 83.77 | |
| SimGuardAttack=DPGBA2025.02 | 86.08 | 45.93 | 99.78 | |
| GCNAttack=DPGBA2025.02 | 87.11 | 45.61 | — | |
| GCNAttack=UGBA2025.02 | 91.75 | 44.47 | — | |
| ODAttack=DPGBA2025.02 | 92.95 | 42.78 | 95.18 | |
| PruneAttack=DPGBA2025.02 | 94.23 | 42.42 | 92.29 | |
| GNNGuardAttack=UGBA2025.02 | 94.58 | 45.49 | 2.47 | |
| RobustGCNAttack=UGBA2025.02 | 95.34 | 40.95 | 3.65 | |
| RobustGCNAttack=DPGBA2025.02 | 98.14 | 41.08 | 93.92 | |
| GNNGuardAttack=SBA2025.02 | 98.24 | 50.28 | 1.62 | |
| PruneAttack=UGBA2025.02 | 99.8 | 42.76 | 0.11 | |
| GCNAttack=GTA2025.02 | 100 | 42.39 | — | |
| RobustGCNAttack=GTA2025.02 | 100 | 41.19 | 0 |